diff options
| author | gVisor bot <gvisor-bot@google.com> | 2021-10-05 12:47:30 -0700 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2021-10-05 12:47:30 -0700 |
| commit | 6f6cf522ec32e7988434586ce1fcbd7f2133dbaa (patch) | |
| tree | c849f1f47896bc0eb2e4ff0ce9857b82465acfd2 /runsc | |
| parent | 499a1033dcc92a88d0613448bfe7ab0a7bfed8c0 (diff) | |
| parent | 38a642f127a4119cffbde5c3854acba275ad9748 (diff) | |
Merge pull request #6689 from avagin:bazel-update
PiperOrigin-RevId: 401053179
Diffstat (limited to 'runsc')
| -rw-r--r-- | runsc/boot/filter/config.go | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/runsc/boot/filter/config.go b/runsc/boot/filter/config.go index d875aa334..db363435b 100644 --- a/runsc/boot/filter/config.go +++ b/runsc/boot/filter/config.go @@ -646,6 +646,11 @@ func hostInetFilters() seccomp.SyscallRules { func controlServerFilters(fd int) seccomp.SyscallRules { return seccomp.SyscallRules{ + unix.SYS_ACCEPT4: []seccomp.Rule{ + { + seccomp.EqualTo(fd), + }, + }, unix.SYS_ACCEPT: []seccomp.Rule{ { seccomp.EqualTo(fd), |